Security & Compliance

Two professionals reviewing tablet data in modern office with blue lighting overlay

Home
Who we are
Security & Compliance

fingers typing on keyboard of laptop with image treatment

flydocs Cyber Security Posture and Protocols

Airlines, MROs, and lessors rely on flydocs to securely manage the data that underpins their critical operations. Protecting that data is fundamental to maintaining operational integrity, regulatory compliance, and customer confidence. As part of the Lufthansa Digital Tech Ops Ecosystem, flydocs operates under a rigorous security and compliance framework.

This ensures that we meet the highest standards for data protection, governance, and risk management, safeguarding our customers’ information across every touchpoint.

Data Security:

Encryption for data at rest using AES 256 bits technology and for data in transit using TLS v1.2+,
Operational backup for data with an RPO of 15 minutes. The backup is stored in encrypted state.
Defined standard hardening guidelines in line with CIS benchmarks for all our infrastructure components.
Compliance with GDPR is maintained in any activity involving transfer/ handling of personal data.

Product and Application Security:

Audit logging and monitoring is implemented.
Secure integrations are available.
Yearly third-party VAPT assessment and monthly internal SAST & DAST scans are performed.
Secure Authentication & Authorization is ensured using Single Sign On, MFA and Role Based Access Control.
Bi-annual access reviews are performed.
Bot control is configured within WAF (Web Application Firewall) to support bot prevention.
All our systems, OS, Databases are patched to the latest available stable version by using Patch Manager.
Keys & Secrets are securely managed within the cloud environment using the Key Vault.

Secure usage of AI:

At flydocs, we are committed to the ethical, transparent, and secure use of AI in our products and services.

Availability and Resilience:

Systems are continuously monitored to support availability and resilience.
Backup and recovery processes support timely restoration.

Logging and Monitoring:

Security-relevant events are logged and reviewed to support incident detection and investigation.
24*7 monitoring of the environment is enabled using MDR.

Incident Management:

Security incidents are managed through a defined response process.
Incident responses are handled appropriately based on the type and severity of the incident, and the risk classification of the data or systems involved.

Our commitment to you

Backed by 45 years of combined experience in information security, cybersecurity, and compliance, our team provides trusted expertise across three territories, helping organisations navigate complex security and regulatory challenges.

friendly Indian lady wearing light coloured blouse, wearing red lipstick and smiling. The background is an office boardroom, the setting is blurred

Swarna Vats IT, Infrastructure & Security Lead

smiling caucasian man wearing glasses and smart casual clothing in a boardroom with a blurred background

Jamie Hall Compliance & Governance Lead

Swarna Vats IT, Infrastructure & Security Lead

Jamie Hall Compliance & Governance Lead

75+ partners globally

We have a large base of clients and data security and compliance is critical to ensuring business continuity, safety, and operational effectiveness. flydocs conducts regular testing and reviews of our measures to ensure they remain effective, and act on the results of those tests where they highlight areas for improvement.

Cyber Security Certificates

Below is a list of our certifications, including ISO and Cyber Essentials Plus to show our commitment and compliance with handling our customers’ data.

Cyber Essentials Plus